Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
File: q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft (raw, json)
Hash identifier: adfwDoZSrBBRs1fMDq2JTbXahYzp8U2jsd12vjW7hXA=
Subject key identifier: 79:E4:5A:AF:D1:5A:2E:DB:A4:CF:71:F7:A4:9B:E4:92:CC:33:EA:95
Authority key identifier: AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
Certificate issuer: /CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Certificate serial: 019D9B512D07728E0E4EE034014A5E30C253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 12:01:21 +0000
Manifest this update: Fri 17 Apr 2026 12:01:21 +0000
Manifest next update: Sat 18 Apr 2026 12:01:21 +0000
Files and hashes: 1: 6H1pHroW_WpI3RuJ_XZZvGns_sM.roa (hash: NhpuQWl3vvTwNJCxL4zGLvg+GHPtSA273p3r0OlIk9U=)
2: q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl (hash: 39WKlHUdgKCn74wIC+uH53QDs8hSIb5Az87bzcls0W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:2d:07:72:8e:0e:4e:e0:34:01:4a:5e:30:c2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Validity
Not Before: Apr 17 12:01:21 2026 GMT
Not After : Apr 18 12:01:21 2026 GMT
Subject: CN=79e45aafd15a2edba4cf71f7a49be492cc33ea95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:19:a8:06:ca:25:dd:e6:52:d4:bc:aa:b5:6f:
35:5c:22:90:c7:29:ce:8c:5a:b9:16:c5:59:17:04:
d3:97:02:68:20:f4:28:2e:2b:2e:6f:93:c8:0d:dd:
73:a9:db:30:9d:08:d3:21:08:3f:b9:c0:a0:fb:5d:
9a:71:24:3d:7a:ac:2e:b2:4c:ff:fd:91:75:ad:dd:
cb:fb:e6:a0:f6:41:71:e9:44:ac:df:1e:d1:0a:ba:
41:26:5f:4d:5b:96:77:b3:28:6e:74:a3:50:e5:38:
c0:59:7f:d9:cc:76:4e:d2:c1:44:a4:e8:83:13:79:
de:da:b1:8d:6a:0c:e7:7c:c8:83:20:00:4a:b5:1d:
d3:f3:25:4a:2f:4f:d8:17:25:7b:c5:76:cb:78:d7:
ba:d5:f2:98:98:2f:5d:dc:89:a2:a7:63:6d:10:21:
88:b8:81:60:66:ea:78:6a:d1:9b:a9:ba:6a:c7:1d:
88:19:cb:06:b0:c7:ba:78:6f:4f:cb:51:9e:e7:74:
c6:cb:40:35:50:3a:be:ee:79:b0:a0:3a:18:cd:a5:
b9:88:19:a0:46:15:a7:84:97:4d:07:95:46:f8:7a:
3f:44:d4:63:92:99:02:9d:47:6c:d7:ad:0a:c2:67:
6d:3b:5b:45:ae:89:d0:1a:19:9c:b6:f5:bf:25:88:
b3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E4:5A:AF:D1:5A:2E:DB:A4:CF:71:F7:A4:9B:E4:92:CC:33:EA:95
X509v3 Authority Key Identifier:
keyid:AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:b8:53:37:18:4c:d6:6d:7a:c2:0f:ea:d1:ba:38:58:0e:20:
31:f2:65:bd:a9:3e:ca:a7:a5:07:0e:2b:b7:59:19:1f:39:91:
0a:73:96:fe:4a:30:9a:58:a8:e0:9e:de:cb:7c:4a:c8:53:05:
12:21:49:0a:78:94:4d:de:a6:b3:1c:bc:51:06:41:34:d6:5c:
a7:7e:be:2e:54:e3:ac:8f:8b:9d:14:3f:b3:f2:9b:5d:74:d9:
16:05:60:ab:8f:db:72:2e:d1:7f:7b:1b:54:f3:1b:ab:36:ea:
33:f1:cd:f2:10:d7:36:23:e2:df:1a:2c:f4:48:c2:73:26:94:
f6:28:f9:37:0e:c8:65:0a:23:33:b2:8c:d6:27:6b:f7:46:f2:
81:15:b7:0d:08:a5:21:13:d6:31:f5:84:ab:bc:14:45:92:26:
47:ce:5e:a5:ea:1b:43:6d:9c:71:53:2d:0c:90:29:52:ca:f4:
0b:66:7f:aa:9c:a8:a4:c7:19:eb:0c:36:88:86:3f:e2:82:41:
5c:dd:1b:fa:80:fb:29:79:71:94:13:f6:5d:cd:c4:fb:5c:50:
e3:ce:da:8c:4f:9d:19:5f:4a:f4:6e:92:64:29:6f:3f:49:80:
cf:0d:db:da:3c:09:bb:1d:ff:67:86:ee:8c:a1:36:33:a0:9d:
f3:57:35:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUS0Hco4OTuA0AUpeMMJTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNTNlYzBlOWEwNTNjYmJlMGU5YTA3MWJjYWQ5ZTY4YTk5
Y2NmYTgwHhcNMjYwNDE3MTIwMTIxWhcNMjYwNDE4MTIwMTIxWjAzMTEwLwYDVQQD
Eyg3OWU0NWFhZmQxNWEyZWRiYTRjZjcxZjdhNDliZTQ5MmNjMzNlYTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBmoBsol3eZS1LyqtW81XCKQxynO
jFq5FsVZFwTTlwJoIPQoLisub5PIDd1zqdswnQjTIQg/ucCg+12acSQ9eqwuskz/
/ZF1rd3L++ag9kFx6USs3x7RCrpBJl9NW5Z3syhudKNQ5TjAWX/ZzHZO0sFEpOiD
E3ne2rGNagznfMiDIABKtR3T8yVKL0/YFyV7xXbLeNe61fKYmC9d3Imip2NtECGI
uIFgZup4atGbqbpqxx2IGcsGsMe6eG9Py1Ge53TGy0A1UDq+7nmwoDoYzaW5iBmg
RhWnhJdNB5VG+Ho/RNRjkpkCnUds160KwmdtO1tFronQGhmctvW/JYizNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnkWq/RWi7bpM9x96Sb5JLMM+qVMB8GA1UdIwQY
MBaAFKtT7A6aBTy74OmgcbytnmipnM+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTFQc0Rwb0ZQTHZnNmFCeHZLMmVhS21jejZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82MWYzOTgtOTRmNi00NDY4LTg1ZjMt
NjNmY2FhYzMxY2EzLzEvcTFQc0Rwb0ZQTHZnNmFCeHZLMmVhS21jejZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy82MWYzOTgtOTRmNi00NDY4LTg1ZjMtNjNmY2FhYzMxY2Ez
LzEvcTFQc0Rwb0ZQTHZnNmFCeHZLMmVhS21jejZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvbhTNxhM
1m16wg/q0bo4WA4gMfJlvak+yqelBw4rt1kZHzmRCnOW/kowmlio4J7ey3xKyFMF
EiFJCniUTd6msxy8UQZBNNZcp36+LlTjrI+LnRQ/s/KbXXTZFgVgq4/bci7Rf3sb
VPMbqzbqM/HN8hDXNiPi3xos9EjCcyaU9ij5Nw7IZQojM7KM1idr90bygRW3DQil
IRPWMfWEq7wURZImR85epeobQ22ccVMtDJApUsr0C2Z/qpyopMcZ6ww2iIY/4oJB
XN0b+oD7KXlxlBP2Xc3E+1xQ487ajE+dGV9K9G6SZClvP0mAzw3b2jwJux3/Z4bu
jKE2M6Cd81c1pw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:40:37 2026 by rpki-client